SAP Solution Manager - How to add a Team Member in a project via SOLAR

Logon to your SAP Solution Manager (make sure your user has necessary authorizations for this task)

1. Execute Transaction: SOLAR_PROJECT_ADMIN
2. 'Project Administration - SAP Solution Manager' will open
3. Doube click on your
4. You will see: Change Project - - SAP Solution Manager
5. You will tabs like: General Data, Scope, Proj. Team Member, System Landscape, Templates, etc.
6. Here, click on Proj. Team Member tab
7. Now click on '+' button to add a line
8. You should see a blank line added to the list
9. Here select user ID of the team member that you want to add under Project Team Member column (the first column!)
10. Remaining details should be filled out automatically
11. Now SAVE!

You are all set, this added team member can now be available for selection on all your SOLAR work.

How to find missing Auth Objects in SAP Security

A user reports of getting 'Missing Authorizations' related messages and you need to find out the missing objects.

If the question involves many messages involving missing authorizations then I would first create a test user copying the user with the issue and:

1. Execute Transacation ST01 (i.e. ST'ZERO'1) for System Trace
2. Check mark the box next to Authorization check under Trace Components
3. Click on General Filters
4. Enter the user name in 'Trace for user only' field
5. Click on Green 'Back' icon (next to red 'X') or press F2
6. Click on 'Trace on' (next to Refresh)
7. You will see 'Trace Status:' changed as 'Trace switched on (main switch on)
8. Now recreate the issue, i.e. perform the steps by which the user was getting those 'Missing Authorizations' related messages, either in SAP GUI or in Web UI
9. Once you execute the very step, after which you get the messages in question, go to ST01 and turn the Trace off, i.e. click on the next button to Trace on
10. Now click on Analysis
11. Select the user name (by default it will be the user that you are logged on to SAP GUI with)
12. Check the correctness of the time, i.e. From: and To: fields
13. Remove the Table Restrictions and enter '*' instead
14. Uncheck all Trace Records except Authorization Check
15. Click Execute
16. Now you should see a Trace Display in which you will several columns with line items with different Green shades..Dark and Light green..
17. Among the columns displayed you will see the fourth column with Authorization Object and RC (Return Code)
18. Find the objects with non-zero RC and you should see the missing authorizations
19. This you can use to modify the existing role accordingly and reexecute the steps to see if the Missing Authorizations related messages appear again.

How to Filter BP Roles using Auth Objects

Scenario:

You need to restrict the available BP roles in the drop down menu of roles when you create a BP using IC Webclient.

You have already made necessary authorizations objects selections based on your requirements.

Still the drop down menu shows other BP roles than what you want to be filtered out.

Procedure:

In addition to restrict BP roles using authorization objects via PFCG, you need to run the following Business Add-In:

Transaction code: SPRO
Click on IMG
Expand:
Customer Relationship Management
Master Data
Business Partner
Business Add-Ins

Here you will see (the last one) Implementation: Filtering of BP Roles by Authorization Check

Execute this BAdI

Outcome:
Once the above BAdI is executed, the filtering will start and you will see only those roles that you have customized using auth objects.

TREX Administration Tool

Transaction Code: TREXADMIN
Provide the RFC Destination and execute.
You should see tabs such as:
Summary
Services (default)
Trace
Ini Files
Alert
RFC Monitor
Search
Index Landscape
Index Admin
Queue Administration
Version
and
Topology

There will be Advanced Mode, along with TREX ABAP Customizing button on the top which will give you more options/tabs to choose from.